Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: /RAxsx1THFAQRpd9IpDqH3d3Vyn4kMTHbumwMU1ng30=
Subject key identifier: C3:AE:11:F1:71:2B:3C:DC:99:43:18:78:7B:EE:AD:3D:0F:D8:DF:BB
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 01976C61EF3DC98BFB255A9A0A8D9980B1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0C1C
Signing time: Sat 14 Jun 2025 03:00:46 +0000
Manifest this update: Sat 14 Jun 2025 03:00:46 +0000
Manifest next update: Sun 15 Jun 2025 03:00:46 +0000
Files and hashes: 1: 1SW-2xi11V63HCREW8hUdL3tZmw.roa (hash: cOv7Oi38iBDrDb9WZ2Ip3z9u0lLKK3yHhjWLwQyWMKM=)
2: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: tDxKrxzquKpoToUjSZaIe8qKbWTkTY6FkQayxW/eouA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:ef:3d:c9:8b:fb:25:5a:9a:0a:8d:99:80:b1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Jun 14 03:00:46 2025 GMT
Not After : Jun 15 03:00:46 2025 GMT
Subject: CN=c3ae11f1712b3cdc994318787beead3d0fd8dfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2b:bf:72:d4:54:e8:38:00:a3:ed:01:56:af:
2e:48:a4:01:c6:59:e7:e6:d9:19:4c:98:a1:05:e8:
e7:40:8c:d7:55:77:9f:f9:28:b4:97:1d:82:a2:d7:
25:c1:7a:59:05:e5:92:29:87:d0:42:ac:bb:b8:4a:
ff:b4:4c:e9:69:93:97:76:c7:af:6a:d2:2b:c5:2a:
64:49:b9:7e:c5:e9:0f:6f:62:8d:bd:e1:69:2c:b6:
46:87:ea:fa:69:f2:2e:d6:dc:6b:bd:d9:fc:b0:7f:
76:9e:77:86:62:1c:e4:d8:e9:6c:99:38:f6:0d:de:
4a:77:f2:12:33:c3:98:3d:c7:9a:d1:0c:1f:08:9d:
92:5a:f8:50:02:35:0c:dd:e0:ba:53:f3:48:ef:0f:
41:1a:17:ee:0b:d0:c8:f5:8f:25:31:e1:68:83:d3:
b9:f7:58:7d:ec:63:b8:a0:c7:b6:1b:d2:60:89:10:
2b:11:d6:5a:0e:84:ef:ba:44:34:c4:13:ed:5b:68:
94:d5:cd:f4:d1:a5:7e:a6:e0:c9:0e:e9:78:d0:89:
3c:91:22:42:ff:5f:35:75:87:05:96:48:29:c9:43:
78:58:25:4f:f5:4a:63:2b:44:f5:b7:ab:66:e2:a3:
d6:dd:0f:46:cb:cf:5c:95:8f:bd:5b:72:a4:dc:f3:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AE:11:F1:71:2B:3C:DC:99:43:18:78:7B:EE:AD:3D:0F:D8:DF:BB
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8e:b8:46:da:cf:d1:01:12:01:f0:66:9c:df:25:4b:08:91:
4d:3f:54:61:1e:e6:1b:4e:6d:ec:8f:a2:15:e7:d1:4f:53:50:
48:64:49:25:12:00:81:57:08:06:2a:fb:07:37:58:e1:9f:72:
1a:5c:f3:e2:b5:02:2d:c1:cb:d4:f9:9b:48:d9:38:cf:dd:75:
eb:8c:b3:80:2a:48:09:00:fb:1d:97:9a:72:f9:66:d4:2e:15:
c2:e3:5c:e9:d3:5e:4e:f5:98:6b:27:2b:3a:3e:26:0d:8e:55:
24:a8:a7:28:d0:11:2a:a0:8b:de:e8:f0:a1:bb:70:a5:37:74:
27:9e:01:bc:4e:4e:63:4e:58:88:af:ff:74:d3:4d:b7:cf:12:
53:3b:a3:9e:a2:16:e4:c4:51:97:c0:81:c2:b6:64:1d:34:8c:
34:0b:a5:d0:45:27:13:d6:ba:67:1c:f2:15:5e:56:ee:dc:4d:
8b:25:af:c5:63:e2:70:b5:ab:6b:45:d9:76:1a:df:ca:b6:23:
7b:aa:65:45:8b:e5:d9:68:85:01:ce:0b:14:e6:01:76:27:38:
72:2c:c3:b9:14:64:ab:b2:21:c6:b8:e3:af:9d:4c:18:52:a8:
4f:2a:0b:59:be:d2:c7:ff:1f:5a:81:89:e3:3c:83:91:8b:32:
94:60:fe:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:41:18 2025 by rpki-client